This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json) Hash identifier: 6/z47y+4or73opEuMLMKF1n7vTWDHTPzYlUI/lz8STY= Subject key identifier: 16:96:8B:17:81:AB:BC:74:9F:60:72:11:7F:A9:BE:03:47:FC:3F:0C Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Certificate serial: 019AF3F7D2F78AAEAFB887C29BC1EA7B2C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft Manifest number: 0994 Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: 2tVvT-OzgGdNXgQsNlAxpRssgyE.roa (hash: EhNAeP4JfxTsW+0bH7nE7m5v2RlCWybXdkQhCZXgLiY=) 2: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=) 3: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=) 4: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: W26GJJ0aczyQZe6nguyo34IKoBzmgu4z30fsuBpMR7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d2:f7:8a:ae:af:b8:87:c2:9b:c1:ea:7b:2c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=16968b1781abbc749f6072117fa9be0347fc3f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:6d:f0:4f:23:2c:72:ea:a6:55:76:6d:8a: d4:2b:f2:bb:85:6e:08:2c:bd:28:e7:d9:e5:74:48: 09:89:39:7f:2d:fc:b5:a4:4a:00:6f:be:c8:c6:ad: 96:c6:33:a5:12:20:43:40:00:46:00:8a:8e:28:33: c9:47:e4:3c:3f:77:f6:d0:21:95:68:29:3d:6c:57: 7e:a8:da:48:48:e0:f5:a2:b7:0a:ba:ef:9a:4a:26: b5:74:3b:40:4e:a6:ae:ed:9f:32:b6:f1:b4:ac:6f: 28:9d:85:67:ac:f9:be:c4:15:c2:18:78:44:61:a0: bc:34:57:fd:be:09:49:0a:ff:eb:fd:5b:50:7e:e9: 9a:f3:e5:0b:9b:b8:48:f4:b9:fa:28:c1:d4:61:d0: 43:c3:1f:50:77:fd:e2:2f:dd:84:20:f6:76:1a:82: e1:d9:12:23:ef:a5:92:ea:17:eb:76:95:bf:06:7d: 6a:6d:39:96:e3:b5:60:2d:44:bc:cf:ce:0d:90:a2: 00:0f:da:c2:ef:33:38:78:5a:9d:5f:52:cf:fe:e3: cb:88:e6:0a:e8:0e:ac:8b:6f:8b:08:96:3b:d5:8a: 1d:2b:c1:8b:63:46:37:9a:a2:db:a0:da:8b:68:46: 01:7a:67:57:da:5d:78:8d:0f:05:c7:d3:42:8c:c7: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:8B:17:81:AB:BC:74:9F:60:72:11:7F:A9:BE:03:47:FC:3F:0C X509v3 Authority Key Identifier: keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:15:30:e8:71:b6:2f:34:a3:32:f0:3c:0e:d6:47:e3:5f:6c: 32:14:31:fa:49:6f:c3:cc:29:71:b5:f1:79:98:05:2b:b6:0d: 2e:7c:89:3b:14:66:27:be:9d:53:b8:c7:b2:e3:54:57:d1:b8: fe:4a:87:86:62:4c:5f:5d:be:12:0a:80:40:f6:33:5f:09:e6: be:0c:45:fd:96:22:bb:6c:51:c6:50:c8:f5:21:4e:5f:93:ed: 1f:79:07:32:17:e2:9f:c2:49:d5:25:e7:15:2a:2c:7b:6c:89: b6:56:02:14:87:ec:89:7b:e0:6a:c7:9a:73:f8:38:a2:bf:fd: 40:2c:6e:cc:7d:5d:a6:98:a7:9c:d5:36:28:af:00:af:b7:62: e1:92:d2:12:97:a9:d3:ac:2e:66:b7:dc:c2:df:20:0a:33:dc: c7:a8:e8:95:ac:8f:a1:e1:56:7c:f5:51:85:5d:c7:8e:d8:88: d5:1b:17:b2:26:a3:01:a5:c1:8a:35:16:10:34:29:29:98:a2: c2:34:21:c0:2b:56:77:47:79:64:6e:71:96:a1:0d:00:5d:41: fc:b6:d5:5a:8c:55:f1:fd:19:24:01:70:cc:ce:a3:25:d9:82: 85:e0:29:f3:6c:d8:7d:1e:97:fd:bc:f0:0e:6d:21:fa:20:6b: ab:d4:49:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99L3iq6vuIfCm8HqeywsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODE0ZGQzOWRkMzkyNWNmZjg4YmYzNGQ0MzA3ZmQ2YzYy MTY1ZWIwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD EygxNjk2OGIxNzgxYWJiYzc0OWY2MDcyMTE3ZmE5YmUwMzQ3ZmMzZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr1t8E8jLHLqplV2bYrUK/K7hW4I LL0o59nldEgJiTl/Lfy1pEoAb77Ixq2WxjOlEiBDQABGAIqOKDPJR+Q8P3f20CGV aCk9bFd+qNpISOD1orcKuu+aSia1dDtATqau7Z8ytvG0rG8onYVnrPm+xBXCGHhE YaC8NFf9vglJCv/r/VtQfuma8+ULm7hI9Ln6KMHUYdBDwx9Qd/3iL92EIPZ2GoLh 2RIj76WS6hfrdpW/Bn1qbTmW47VgLUS8z84NkKIAD9rC7zM4eFqdX1LP/uPLiOYK 6A6si2+LCJY71YodK8GLY0Y3mqLboNqLaEYBemdX2l14jQ8Fx9NCjMflxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaWixeBq7x0n2ByEX+pvgNH/D8MMB8GA1UdIwQY MBaAFJCBTdOd05Jc/4i/NNQwf9bGIWXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjkt OTQwYWU0NTRjYjg1LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wY2NhYjYtZDgzNy00YzE4LTgyZjktOTQwYWU0NTRjYjg1 LzEva0lGTjA1M1RrbHpfaUw4MDFEQl8xc1loWmVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBUw6HG2 LzSjMvA8DtZH419sMhQx+klvw8wpcbXxeZgFK7YNLnyJOxRmJ76dU7jHsuNUV9G4 /kqHhmJMX12+EgqAQPYzXwnmvgxF/ZYiu2xRxlDI9SFOX5PtH3kHMhfin8JJ1SXn FSose2yJtlYCFIfsiXvgaseac/g4or/9QCxuzH1dppinnNU2KK8Ar7di4ZLSEpep 06wuZrfcwt8gCjPcx6jolayPoeFWfPVRhV3HjtiI1RsXsiajAaXBijUWEDQpKZii wjQhwCtWd0d5ZG5xlqENAF1B/LbVWoxV8f0ZJAFwzM6jJdmCheAp82zYfR6X/bzw Dm0h+iBrq9RJuA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:11:53 2025 by rpki-client